use super::{columns::Column, interpreter::InterpreterEnv};
use crate::{
columns::{Gadget, E},
curve::ArrabbiataCurve,
interpreter::{self, Instruction, Side},
MAX_DEGREE, NUMBER_OF_COLUMNS, NUMBER_OF_PUBLIC_INPUTS,
};
use ark_ec::{short_weierstrass::SWCurveConfig, CurveConfig};
use ark_ff::PrimeField;
use kimchi::circuits::{
expr::{ConstantTerm::Literal, Expr, ExprInner, Operations, Variable},
gate::CurrOrNext,
};
use log::debug;
use num_bigint::BigInt;
use o1_utils::FieldHelpers;
use poly_commitment::commitment::CommitmentCurve;
#[derive(Clone, Debug)]
pub struct Env<C: ArrabbiataCurve> {
pub a: BigInt,
pub idx_var: usize,
pub idx_var_next_row: usize,
pub idx_var_pi: usize,
pub constraints: Vec<E<C::ScalarField>>,
pub activated_gadget: Option<Gadget>,
}
impl<C: ArrabbiataCurve> Env<C>
where
<<C as CommitmentCurve>::Params as CurveConfig>::BaseField: PrimeField,
{
pub fn new() -> Self {
let a: BigInt = <C as CommitmentCurve>::Params::COEFF_A.to_biguint().into();
assert!(
a < C::ScalarField::modulus_biguint().into(),
"a is too large"
);
Self {
a,
idx_var: 0,
idx_var_next_row: 0,
idx_var_pi: 0,
constraints: Vec::new(),
activated_gadget: None,
}
}
}
impl<C: ArrabbiataCurve> InterpreterEnv for Env<C> {
type Position = (Column, CurrOrNext);
type Variable = E<C::ScalarField>;
fn allocate(&mut self) -> Self::Position {
assert!(self.idx_var < NUMBER_OF_COLUMNS, "Maximum number of columns reached ({NUMBER_OF_COLUMNS}), increase the number of columns");
let pos = Column::X(self.idx_var);
self.idx_var += 1;
(pos, CurrOrNext::Curr)
}
fn allocate_next_row(&mut self) -> Self::Position {
assert!(self.idx_var_next_row < NUMBER_OF_COLUMNS, "Maximum number of columns reached ({NUMBER_OF_COLUMNS}), increase the number of columns");
let pos = Column::X(self.idx_var_next_row);
self.idx_var_next_row += 1;
(pos, CurrOrNext::Next)
}
fn read_position(&self, pos: Self::Position) -> Self::Variable {
let (col, row) = pos;
Expr::Atom(ExprInner::Cell(Variable { col, row }))
}
fn allocate_public_input(&mut self) -> Self::Position {
assert!(self.idx_var_pi < NUMBER_OF_PUBLIC_INPUTS, "Maximum number of public inputs reached ({NUMBER_OF_PUBLIC_INPUTS}), increase the number of public inputs");
let pos = Column::PublicInput(self.idx_var_pi);
self.idx_var_pi += 1;
(pos, CurrOrNext::Curr)
}
fn constant(&self, value: BigInt) -> Self::Variable {
let v = value.to_biguint().unwrap();
let v = C::ScalarField::from_biguint(&v).unwrap();
let v_inner = Operations::from(Literal(v));
Self::Variable::constant(v_inner)
}
fn write_public_input(&mut self, pos: Self::Position, _v: BigInt) -> Self::Variable {
self.read_position(pos)
}
fn write_column(&mut self, pos: Self::Position, v: Self::Variable) -> Self::Variable {
let (col, row) = pos;
let res = Expr::Atom(ExprInner::Cell(Variable { col, row }));
self.assert_equal(res.clone(), v);
res
}
fn activate_gadget(&mut self, gadget: Gadget) {
self.activated_gadget = Some(gadget);
}
fn add_constraint(&mut self, constraint: Self::Variable) {
let degree = constraint.degree(1, 0);
debug!("Adding constraint of degree {degree}: {:}", constraint);
assert!(degree <= MAX_DEGREE, "degree is too high: {}. The folding scheme used currently allows constraint up to degree {}", degree, MAX_DEGREE);
self.constraints.push(constraint);
}
fn constrain_boolean(&mut self, x: Self::Variable) {
let one = self.one();
let c = x.clone() * (x.clone() - one);
self.constraints.push(c)
}
fn assert_zero(&mut self, x: Self::Variable) {
self.add_constraint(x);
}
fn assert_equal(&mut self, x: Self::Variable, y: Self::Variable) {
self.add_constraint(x - y);
}
unsafe fn bitmask_be(
&mut self,
_x: &Self::Variable,
_highest_bit: u32,
_lowest_bit: u32,
pos: Self::Position,
) -> Self::Variable {
self.read_position(pos)
}
fn square(&mut self, pos: Self::Position, x: Self::Variable) -> Self::Variable {
let v = self.read_position(pos);
let x = x.square();
self.add_constraint(x - v.clone());
v
}
fn fetch_input(&mut self, pos: Self::Position) -> Self::Variable {
self.read_position(pos)
}
fn reset(&mut self) {
self.idx_var = 0;
self.idx_var_next_row = 0;
self.idx_var_pi = 0;
self.constraints.clear();
self.activated_gadget = None;
}
fn coin_folding_combiner(&mut self, pos: Self::Position) -> Self::Variable {
self.read_position(pos)
}
fn load_poseidon_state(&mut self, pos: Self::Position, _i: usize) -> Self::Variable {
self.read_position(pos)
}
unsafe fn save_poseidon_state(&mut self, _x: Self::Variable, _i: usize) {}
fn get_poseidon_round_constant(
&mut self,
pos: Self::Position,
_round: usize,
_i: usize,
) -> Self::Variable {
let (col, row) = pos;
match col {
Column::PublicInput(_) => (),
_ => panic!("Only public inputs can be used as round constants"),
};
Expr::Atom(ExprInner::Cell(Variable { col, row }))
}
fn get_poseidon_mds_matrix(&mut self, i: usize, j: usize) -> Self::Variable {
let v = C::sponge_params().mds[i][j];
let v_inner = Operations::from(Literal(v));
Self::Variable::constant(v_inner)
}
unsafe fn fetch_value_to_absorb(
&mut self,
pos: Self::Position,
_curr_round: usize,
) -> Self::Variable {
self.read_position(pos)
}
unsafe fn load_temporary_accumulators(
&mut self,
pos_x: Self::Position,
pos_y: Self::Position,
_side: Side,
) -> (Self::Variable, Self::Variable) {
let x = self.read_position(pos_x);
let y = self.read_position(pos_y);
(x, y)
}
unsafe fn save_temporary_accumulators(
&mut self,
_x: Self::Variable,
_y: Self::Variable,
_side: Side,
) {
}
unsafe fn inverse(&mut self, pos: Self::Position, x: Self::Variable) -> Self::Variable {
let v = self.read_position(pos);
let res = v.clone() * x.clone();
self.assert_equal(res.clone(), self.one());
v
}
unsafe fn is_same_ec_point(
&mut self,
pos: Self::Position,
_x1: Self::Variable,
_y1: Self::Variable,
_x2: Self::Variable,
_y2: Self::Variable,
) -> Self::Variable {
self.read_position(pos)
}
fn zero(&self) -> Self::Variable {
self.constant(BigInt::from(0_usize))
}
fn one(&self) -> Self::Variable {
self.constant(BigInt::from(1_usize))
}
fn double_ec_point(
&mut self,
pos_x: Self::Position,
pos_y: Self::Position,
x1: Self::Variable,
y1: Self::Variable,
) -> (Self::Variable, Self::Variable) {
let lambda = {
let pos = self.allocate();
self.read_position(pos)
};
let x3 = self.read_position(pos_x);
let y3 = self.read_position(pos_y);
let x1_square = x1.clone() * x1.clone();
let two_x1_square = x1_square.clone() + x1_square.clone();
let three_x1_square = two_x1_square.clone() + x1_square.clone();
let two_y1 = y1.clone() + y1.clone();
let res = lambda.clone() * two_y1 - (three_x1_square + self.constant(self.a.clone()));
self.assert_zero(res);
self.assert_equal(
x3.clone(),
lambda.clone() * lambda.clone() - x1.clone() - x1.clone(),
);
self.assert_equal(
y3.clone(),
lambda.clone() * (x1.clone() - x3.clone()) - y1.clone(),
);
(x3, y3.clone())
}
fn compute_lambda(
&mut self,
pos: Self::Position,
is_same_point: Self::Variable,
x1: Self::Variable,
y1: Self::Variable,
x2: Self::Variable,
y2: Self::Variable,
) -> Self::Variable {
let lambda = self.read_position(pos);
let lhs = lambda.clone() * (x1.clone() - x2.clone()) - (y1.clone() - y2.clone());
let rhs = {
let x1_square = x1.clone() * x1.clone();
let two_x1_square = x1_square.clone() + x1_square.clone();
let three_x1_square = two_x1_square.clone() + x1_square.clone();
let two_y1 = y1.clone() + y1.clone();
lambda.clone() * two_y1 - (three_x1_square + self.constant(self.a.clone()))
};
let res = is_same_point.clone() * lhs + (self.one() - is_same_point.clone()) * rhs;
self.assert_zero(res);
lambda
}
}
impl<C: ArrabbiataCurve> Env<C> {
pub fn get_all_constraints_for_ivc(&self) -> Vec<E<C::ScalarField>> {
let mut env = self.clone();
env.reset();
let mut constraints = vec![];
interpreter::run_ivc(&mut env, Instruction::Poseidon(0));
constraints.extend(env.constraints.clone());
env.reset();
interpreter::run_ivc(&mut env, Instruction::EllipticCurveScaling(0, 0));
constraints.extend(env.constraints.clone());
env.reset();
interpreter::run_ivc(&mut env, Instruction::EllipticCurveAddition(0));
constraints.extend(env.constraints.clone());
env.reset();
constraints
}
pub fn get_all_constraints(&self) -> Vec<E<C::ScalarField>> {
let mut constraints = self.get_all_constraints_for_ivc();
let mut env = self.clone();
env.reset();
interpreter::run_app(&mut env);
constraints.extend(env.constraints.clone());
constraints
}
}
impl<C: ArrabbiataCurve> Default for Env<C>
where
<<C as CommitmentCurve>::Params as CurveConfig>::BaseField: PrimeField,
{
fn default() -> Self {
Self::new()
}
}